Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263962a3-6610-47d9-8433-90359d17e27d.roa
File:                     263962a3-6610-47d9-8433-90359d17e27d.roa (raw, json)
Hash identifier:          FpOoZ4RBjQzHR20CSFNW6Dnv0h3kP6Z6mI+NudkmlE8=
Subject key identifier:   99:BA:39:C2:0D:28:04:26:50:32:49:7E:99:15:05:8F:99:5B:75:25
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       050859D95869E229545C2D6CC4717A38FF3BA9B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263962a3-6610-47d9-8433-90359d17e27d.roa
Signing time:             Fri 15 Aug 2025 00:30:20 +0000
ROA not before:           Fri 15 Aug 2025 00:30:20 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.33.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:08:59:d9:58:69:e2:29:54:5c:2d:6c:c4:71:7a:38:ff:3b:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 15 00:30:20 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=3bbc8191b6087e7ffa2e2670b7772485202e353bff26c053908db268ced82ddf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:bc:e7:79:f5:dd:0a:7f:64:91:78:76:db:
                    e2:ef:69:09:00:2a:bd:5f:5b:bc:6d:8f:95:47:2c:
                    c7:d9:21:74:46:9c:74:a9:aa:c3:df:54:b5:ac:f0:
                    be:f8:6f:27:98:57:79:a4:33:f7:0b:d8:ce:bc:0c:
                    00:f7:1a:35:55:c5:d4:b3:ea:14:b6:09:27:62:86:
                    60:a2:28:6e:7c:99:2d:34:fc:1d:49:1d:ee:83:06:
                    03:fd:d9:4d:ca:43:f4:ec:eb:f3:ba:78:3d:c6:d8:
                    48:e4:05:26:fc:d5:d9:89:31:28:97:18:4d:fa:0e:
                    58:2d:aa:85:f6:73:80:c1:4d:6e:d9:56:3f:76:ff:
                    56:a9:51:fb:62:63:45:46:cd:05:09:84:64:ae:b0:
                    3a:88:d8:5f:39:d7:4a:d1:b4:b6:a0:c0:3b:a9:14:
                    a4:0c:26:98:0b:f9:49:86:40:e6:f9:32:e7:8c:8a:
                    07:ce:5d:dc:a3:cd:eb:13:df:29:e5:5a:a5:df:65:
                    72:b0:16:92:bf:8e:70:fd:c3:68:f2:23:9b:92:33:
                    a6:6b:81:33:85:4c:4a:87:80:af:8f:f7:f4:d1:86:
                    ea:42:de:6f:65:0b:c1:5e:a4:18:a9:75:75:88:3f:
                    b8:11:47:8a:c7:41:e8:c8:ac:1d:a5:5f:3a:81:00:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BA:39:C2:0D:28:04:26:50:32:49:7E:99:15:05:8F:99:5B:75:25
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/263962a3-6610-47d9-8433-90359d17e27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.33.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:60:e5:1d:0a:d8:3a:7d:91:15:2f:94:63:ac:e6:f7:90:a1:
         e1:f0:e0:7d:f5:0f:83:0d:14:65:13:48:82:5c:ba:f8:0b:ce:
         0f:81:36:45:59:b2:a9:27:fa:8c:6a:8b:bc:23:d7:03:e6:b5:
         81:83:94:be:53:43:1c:c2:f0:1e:cc:99:e6:43:58:9b:20:e1:
         a5:bd:a6:5e:55:56:15:40:9d:b2:05:cc:b0:a6:cd:70:5d:ef:
         f3:38:03:a7:c1:a0:75:a3:27:39:3a:09:96:f2:ad:29:7f:c1:
         38:03:28:c2:7b:8d:ef:46:ad:a5:eb:ae:5c:fd:0a:be:af:39:
         cf:84:55:2c:41:cc:f9:d2:38:8b:8e:96:7d:33:64:2b:a8:3b:
         56:f0:f1:6e:05:4e:0d:89:23:1e:2f:2a:7d:84:12:4b:fb:ba:
         f6:7f:7e:d7:23:1c:7a:11:82:05:7e:ac:3d:d9:f0:c3:36:8b:
         7e:ca:5c:81:d5:07:f6:4b:06:1c:da:39:80:5a:9a:bf:4a:49:
         5e:47:0d:0e:b3:a2:dc:fd:35:63:db:47:e3:88:27:52:3a:96:
         e4:a3:b5:f1:ed:a0:73:48:95:c5:c9:0a:14:99:c2:df:a8:7b:
         04:8d:b6:74:3c:c0:68:f9:ca:73:22:bf:04:94:a9:55:da:18:
         c0:6c:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:05:03 2025 by rpki-client